Privacy Policy

Last updated: October 13, 2026

This policy explains what data FilamentCraft (operated by Wiser Pocket, owner: Hoceine EL IDRISSI) collects and how it is used.

What we collect

When you purchase a license, our merchant of record Paddle.com Market Ltd. processes your payment. Paddle collects your name, email address, country, and payment details under its own privacy policy. We never see or store your card details.

From Paddle we receive and store only what we need to deliver the product:

• your email address and name,
• the product/tier purchased and the transaction identifier,
• the license key we generate for you.

When you install the package, our registry (packages.filamentcraft.dev) receives your license key and email (as Composer HTTP-basic credentials) plus standard web server logs (IP address, user agent, requested version). We use this solely to authenticate downloads and operate the service.

This documentation site is a static site. It does not set cookies and does not run third-party analytics.

Anonymous visit counts. To learn which pages help and where buyers drop off, this site sends a few anonymous events to our own server (packages.filamentcraft.dev), never to a third party:

• pages viewed, how far you scroll the home and pricing pages (25/50/75/100%), and active reading time in 15-second steps (capped at 3 minutes per page),
• clicks on our calls to action and on links that leave the site (only the destination's host, e.g. github.com),
• on the pricing page and in checkout: plan clicked, checkout opened, email entered, payment chosen, purchase completed or checkout closed (never the email or payment details themselves),
• where the visit came from: the referring site's host name only (never the full address), any ?ref= tag and utm_source / utm_medium / utm_campaign tags in the link you followed,
• a coarse device type (mobile, tablet or desktop) worked out from your browser's user agent, which is then discarded, and your country when our hosting provider supplies it.

Each browser tab gets a random id stored in sessionStorage, which disappears when the tab closes; we keep only a keyed hash of it. No cookies are set, and no IP address, email, name or full user agent is stored with these counts. When you open the live demo from this site, that tab id and your ref / UTM tags are added to the demo link so the demo can count the visit as coming from here. Events are deleted after 180 days. If your browser sends a Global Privacy Control or Do Not Track signal, nothing is counted and nothing is added to demo links.

The live demo (demo.filamentcraft.dev) keeps its own visit log so we can see what people try: an anonymised IP address (last block zeroed), your browser's user-agent string (with the browser, platform and device type read from it), the referring site's host, the ref / UTM tags and tab id above when you arrive from this site, pages viewed and editor actions. It uses one cookie that ends when you close the browser, and the log is deleted after 90 days.

What we don't do

• We don't sell or rent your data to anyone.
• We don't send marketing email — license and service emails only (e.g. your key, important security notices).
• We don't collect telemetry from the Software itself: FilamentCraft runs entirely inside your own application and phones nothing home.

Data retention & your rights

We keep purchase and license records for as long as your license is active and as required for accounting. You can ask us at any time to access, correct, or delete the personal data we hold about you by emailing [email protected]. Deleting your data deactivates your license, since we can no longer authenticate it.

Third parties we rely on

• Paddle — payments, invoices, tax (merchant of record)
• Hetzner / Laravel Forge — hosting of the package registry
• Cloudflare — DNS and hosting of this website

Contact

Privacy questions: [email protected].